Make a list of business-critical information
Include accounting records, customer and project files, shared folders, business email, databases, and information stored on individual computers. Identify who owns each system and where its data lives. Some applications need an application-aware backup or a vendor-supported export so the restored information is actually usable.
Do not assume cloud storage is a complete backup
File synchronization can copy accidental deletions or damaged files to other devices. Cloud services may offer recovery features, but their retention periods, coverage and limitations vary. Review email, shared-drive and business-application recovery options, and decide where a separate backup is needed.
Keep copies that one incident cannot destroy
A common starting point is three copies of important data, on two different storage types, with one copy offsite. Include an offline or immutable copy where practical, use encryption, and restrict backup access. A drive permanently connected beside the server may be lost to the same ransomware attack, flood or theft as the original.
Test recovery and agree on recovery goals
Decide how much recent work you can afford to lose and how long the business can operate without each system. Set backup frequency and retention around those goals. Monitor failures and perform documented restore tests, including application recovery, rather than assuming a successful backup message proves everything can be recovered.
Have a question about what this means for your business? Tell P@C what you need help with.
Want more info